Add endpoint for permissions

appengine/swarming/handlers_endpoints_test.py

 #!/usr/bin/env python
 # coding=utf-8
 # Copyright 2015 The LUCI Authors. All rights reserved.
 # Use of this source code is governed under the Apache License, Version 2.0
 # that can be found in the LICENSE file.
 
 import base64
 import datetime
 import json
 import logging
@@ skipping 52 matching lines @@
 
 
 class ServerApiTest(BaseTest):
   api_service_cls = handlers_endpoints.SwarmingServerService
 
   def test_details(self):
     """Asserts that server_details returns the correct version."""
     response = self.call_api('details')
     self.assertEqual({'server_version': utils.get_app_version()}, response.json)
 
+  def test_public_permissions(self):
+    """Asserts that permissions respond correctly to an unauthed user."""
+    self.set_as_anonymous()
+    response = self.call_api('permissions')
+    expected = {
+        u'can_cancel_task': False,
+        u'can_terminate_bot': False,
+        u'can_delete_bot': False,
+        u'can_get_bot_config_py': False,
+        u'can_get_bootstrap_py': False,
+        u'can_put_bot_config_py': False,
+        u'can_put_bootstrap_py': False,
+        u'can_get_bootstrap_token': False,
+    }
+    self.assertEqual(expected, response.json)
+
+  def test_user_permissions(self):
+    """Asserts that permissions respond correctly to a basic user."""
+    self.set_as_user()
+    response = self.call_api('permissions')
+    expected = {
+        u'can_cancel_task': True,
+        u'can_terminate_bot': False,
+        u'can_delete_bot': False,
+        u'can_get_bot_config_py': True,
+        u'can_get_bootstrap_py': True,
+        u'can_put_bot_config_py': False,
+        u'can_put_bootstrap_py': False,
+        u'can_get_bootstrap_token': False,
+    }
+    self.assertEqual(expected, response.json)
+
+  def test_privileged_user_permissions(self):
+    """Asserts that permissions respond correctly to a privileged user."""
+    self.set_as_privileged_user()
+    response = self.call_api('permissions')
+    expected = {
+        u'can_cancel_task': True,
+        u'can_terminate_bot': True,
+        u'can_delete_bot': False,
+        u'can_get_bot_config_py': True,
+        u'can_get_bootstrap_py': True,
+        u'can_put_bot_config_py': False,
+        u'can_put_bootstrap_py': False,
+        u'can_get_bootstrap_token': False,
+    }
+    self.assertEqual(expected, response.json)
+
+  def test_admin_permissions(self):
+    """Asserts that permissions respond correctly to an admin."""
+    self.set_as_admin()
+    response = self.call_api('permissions')
+    expected = {
+        u'can_cancel_task': True,
+        u'can_terminate_bot': True,
+        u'can_delete_bot': True,
+        u'can_get_bot_config_py': True,
+        u'can_get_bootstrap_py': True,
+        u'can_put_bot_config_py': True,
+        u'can_put_bootstrap_py': True,
+        u'can_get_bootstrap_token': True,
+    }
+    self.assertEqual(expected, response.json)
+
   def _test_file(self, name):
     self.set_as_admin()
 
     now = datetime.datetime(2010, 1, 2, 3, 4, 5)
     self.mock_now(now)
     path = os.path.join(self.APP_DIR, 'swarming_bot', 'config', name + '.py')
     with open(path, 'rb') as f:
       content = f.read().decode('utf-8')
 
     expected = {
@@ skipping 1834 matching lines @@
     self.assertEqual(expected, response.json)
 
 
 if __name__ == '__main__':
   if '-v' in sys.argv:
     unittest.TestCase.maxDiff = None
     logging.basicConfig(level=logging.DEBUG)
   else:
     logging.basicConfig(level=logging.CRITICAL)
   unittest.main()